$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json) Hash identifier: whHLqMjoveSMbk+Z1DB/k7ydoz/FheG9yjkqPTUhu8g= Subject key identifier: C3:0F:30:EE:AA:F3:07:D9:4F:2E:A3:A2:0B:30:AB:D7:41:4E:E6:8E Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Certificate serial: 6079BCB8B2D4774AEA6A2ED14D62E61D87A49768 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft Manifest number: 01C8 Signing time: Sun 07 Sep 2025 19:41:20 +0000 Manifest this update: Sun 07 Sep 2025 19:36:20 +0000 Manifest next update: Wed 10 Sep 2025 20:02:20 +0000 Files and hashes: 1: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: stIIdICFAUmmjPJbZPuus0zTsstOOiSfpPEmNfACiJs=) 2: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: uM0XA0AM+x7njeHld4x4WvIPIQYCBW6QBEs97/wT47g=) 3: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: j8MhQFCNNpgWTqqvo4wUA4sj1OS1sCETyG/kmulGJXY=) 4: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: 320EuOSTdq5hWmMaKiwWxSaEePgMapGBBY9L4k5bTeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 20:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:79:bc:b8:b2:d4:77:4a:ea:6a:2e:d1:4d:62:e6:1d:87:a4:97:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Validity Not Before: Sep 7 19:36:20 2025 GMT Not After : Sep 10 20:02:20 2025 GMT Subject: CN=C30F30EEAAF307D94F2EA3A20B30ABD7414EE68E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:67:bf:08:d9:c4:d2:ea:c3:e6:54:86:d3:b5: 8e:6b:10:a7:85:d8:ab:4c:59:fe:56:e3:1f:ae:64: 19:ef:19:69:88:62:b0:79:8d:48:1f:4d:8f:7b:c4: e8:76:3a:56:17:a9:6e:a5:6f:9a:3a:08:49:cc:e9: d3:90:9a:ff:6f:b5:8a:cd:05:29:05:04:90:c8:45: 94:83:9d:80:31:e9:97:1a:ec:9d:90:a9:cf:54:e0: fe:4f:77:fb:3a:98:5b:b0:2d:d5:1e:d2:66:8a:78: b8:4b:98:d3:a4:38:7a:01:f7:e0:45:57:88:c6:4b: f5:22:8f:68:b0:3f:4d:4b:9b:25:2e:37:92:cf:4d: a3:5b:02:17:41:f4:50:c3:33:1c:41:71:96:ca:00: 90:81:02:e4:c1:b1:7a:cd:87:bd:93:7c:e7:7b:0b: d7:41:6a:0e:6e:7d:20:f0:dc:55:be:f4:6e:a9:9b: fd:99:74:a9:a4:49:0b:41:c3:d4:bb:a4:14:97:af: c6:5e:e5:d1:17:fd:72:c1:9d:8b:e6:f5:1c:2c:bd: 13:f3:b8:51:0f:39:a3:26:89:b5:a0:11:bf:f1:aa: 4d:ce:bd:46:e1:e3:a5:c7:eb:41:d1:ed:81:95:eb: 7e:ca:48:ce:d4:94:10:7d:dc:d9:db:2d:52:8c:f9: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0F:30:EE:AA:F3:07:D9:4F:2E:A3:A2:0B:30:AB:D7:41:4E:E6:8E X509v3 Authority Key Identifier: keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:bf:ee:6b:5c:6e:47:69:e6:03:06:b2:69:f9:6a:1f:ec:f9: 6b:87:d5:a9:21:b7:ad:7b:00:61:a3:dd:4d:41:6e:65:5d:94: 60:6a:d8:57:d8:51:19:80:c3:f5:f1:7c:8a:ca:25:c5:85:38: df:3d:b6:24:cd:44:6d:7a:97:16:ac:66:a3:92:8a:e8:ba:40: bd:75:46:41:4a:bd:68:6c:58:ad:22:fc:e3:c5:a1:63:8e:b9: 22:58:c8:d7:aa:32:eb:15:00:ff:0a:f7:ff:e5:01:86:4d:f3: 21:a2:29:57:93:5f:4b:4d:ea:3d:01:36:1e:38:7b:70:0e:9d: f3:0e:40:bf:b8:af:b1:47:73:ad:8c:67:28:94:94:05:4a:42: 6e:96:aa:95:8e:50:be:b0:d4:05:0b:65:3c:ed:cb:e6:a2:d1: 73:d2:34:60:e8:69:d5:80:97:f3:f5:ea:35:5d:4c:96:2c:00: 4b:e5:92:4a:d6:07:68:b4:7f:fa:22:43:cd:ba:3f:dc:6b:54: 98:7d:20:59:69:0b:ef:27:65:4f:06:22:f0:1f:38:37:e5:96: 9b:48:ca:dc:11:c7:91:07:84:64:26:66:00:e6:f1:e1:cb:20: b3:39:cb:0d:24:e3:47:b7:71:1f:4b:a7:66:be:f1:50:4c:cc: cf:04:bd:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHm8uLLUd0rqai7RTWLmHYekl2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3 OEYyNkYzMDAeFw0yNTA5MDcxOTM2MjBaFw0yNTA5MTAyMDAyMjBaMDMxMTAvBgNV BAMTKEMzMEYzMEVFQUFGMzA3RDk0RjJFQTNBMjBCMzBBQkQ3NDE0RUU2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Z78I2cTS6sPmVIbTtY5rEKeF 2KtMWf5W4x+uZBnvGWmIYrB5jUgfTY97xOh2OlYXqW6lb5o6CEnM6dOQmv9vtYrN BSkFBJDIRZSDnYAx6Zca7J2Qqc9U4P5Pd/s6mFuwLdUe0maKeLhLmNOkOHoB9+BF V4jGS/Uij2iwP01LmyUuN5LPTaNbAhdB9FDDMxxBcZbKAJCBAuTBsXrNh72TfOd7 C9dBag5ufSDw3FW+9G6pm/2ZdKmkSQtBw9S7pBSXr8Ze5dEX/XLBnYvm9RwsvRPz uFEPOaMmibWgEb/xqk3OvUbh46XH60HR7YGV637KSM7UlBB93NnbLVKM+ZJ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUww8w7qrzB9lPLqOiCzCr10FO5o4wHwYDVR0j BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy NkYzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRB Qjg3OEYyNkYzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMG/7mtcbkdp5gMGsmn5ah/s+WuH1akht617 AGGj3U1BbmVdlGBq2FfYURmAw/XxfIrKJcWFON89tiTNRG16lxasZqOSiui6QL11 RkFKvWhsWK0i/OPFoWOOuSJYyNeqMusVAP8K9//lAYZN8yGiKVeTX0tN6j0BNh44 e3AOnfMOQL+4r7FHc62MZyiUlAVKQm6WqpWOUL6w1AULZTzty+ai0XPSNGDoadWA l/P16jVdTJYsAEvlkkrWB2i0f/oiQ826P9xrVJh9IFlpC+8nZU8GIvAfODfllptI ytwRx5EHhGQmZgDm8eHLILM5yw0k40e3cR9Lp2a+8VBMzM8Evcw= -----END CERTIFICATE-----Generated at Tue Sep 9 08:03:47 2025 by rpki-client